Since the first national security letter (NSL) statute was passed in 1986, the FBI has issued hundreds of thousands of such letters seeking the private telecommunications and financial records of Americans without any prior approval from courts. In addition to this immense investigatory power, NSL statutes also permit the FBI to unilaterally gag recipients and prevent them from criticizing such actions publicly. This combination of powers -- to investigate and to silence -- has coalesced to permit the FBI to wield enormous power and to operate without meaningful checks, far from the watchful eyes of the judicial branch. Not surprisingly, this lack of checks has contributed to a dramatic expansion in the use of these tools across the country. Indeed, for the period between 2003 and 2006 alone, almost 200,000 requests for private customer information were sought pursuant to various NSL statutes. Prior to 2011, the constitutionality of this underlying legal authority to investigate the records of Americans without court oversight was challenged in court -- as far as we know -- exactly one time.
In March of 2013, EFF won a major court victory on behalf of an unnamed company when Judge Susan Illston of the Northern District of California granted EFF's petition to set aside a controversial national security letter (NSL), declaring that 18 U.S.C. § 2709 and parts of 18 U.S.C. § 3511 were unconstitutional. Shortly after that, EFF filed a new petition on behalf of a client that received two new NSLs, because the FBI was still demanding that recipients comply with the NSL statute, even though the district court had already found the statute to be unconstitutional on its face.
Notwithstanding the serious constitutional shortcomings of the NSL statute, but noting that the Ninth Circuit would itself evaluate the facial constitutionality of the statute as part of the government's appeal, the district court nonetheless denied EFF's client's petition and ordered it to comply with both the NSLs in the interim. The district court also issued a similar ruling to another EFF client that also received two NSLs in 2013 (case number 13-1165).
All three NSL cases were appealed United States Court of Appeals for the Ninth Circuit in January 2014. After briefing of the appeal and oral argument but before the Ninth Circuit could issue an opinion, Congress passed the USA FREEDOM Act in June 2015, which amended the NSL statute. The Ninth Circuit found that changes made by the USA FREEDOM Act required a new review and sent the cases back to Judge Illston in the district court.
In March 2016, Judge Illston ruled that the USA FREEDOM Act sufficiently addressed the facial constitutional problems with the NSL statute. However, in this case (13-80089), the court found that the FBI had failed to provide a sufficient justification for gagging EFF’s client. That ruling was stayed pending the government’s appeal. After the government dropped its appeal of that ruling in November 2016, EFF’s client in this case was able to reveal itself as CREDO Mobile.
EFF appealed Judge Illston’s ruling back to the Ninth Circuit, where all three cases were consolidated. Days before the second appeal was argued in March 2017, the Justice Department applied termination adopted as part of USA FREEDOM and partially lifted the NSL gags in the other two cases. This allowed EFF to reveal that it was its client in the 2011 NSL case was also CREDO, and that its client in the third case was Cloudflare. However, both CREDO and Cloudflare remained gagged as to other aspects of the NSLs.
In July 2017, the Ninth Circuit issued an opinion upholding the amended NSL statute against these providers' challenges. The court ruled that the statute survived strict scrutiny and that it included all of the procedural protections required of prior restraints.
EFF continues to push for NSL reform, including by asking companies to require judicial review of all NSLs. We are also pursuing a FOIA lawsuit for more information about the NSL Termination procedures adopted pursuant to USA Freedom.